Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

The tool uses checksum matching to run on select applications, which raises critical questions about the validity of ...